Add mediaserver, rm .gitignore, FQCN, Jellyfin

- Added development "mediaserver" playbook for testing
- rm .gitignore in roles dir since no external ansible roles are used
- Update a part of the base role to use FQCN for linting
- Added "jellyfin" role to install Jellyfin with docker-compose
- Updated Traefik to use the loopback for default web entry points
- Simplified Traefik docker-compose vars, Ansible sets defaults
This commit is contained in:
Kris Lamoureux 2023-04-26 02:26:50 -04:00
parent 9512212b84
commit 81d2ea447a
Signed by: kris
GPG Key ID: 3EDA9C3441EDA925
15 changed files with 160 additions and 40 deletions

View File

@ -0,0 +1,37 @@
base_domain: vm.krislamo.org
# base
allow_reboot: false
manage_network: false
# proxy
proxy:
#production: true
dns_cloudflare:
opts: --test-cert
#email: realemail@example.com
#api_token: CLOUDFLARE_DNS01_API_TOKEN
wildcard_domains:
- "{{ base_domain }}"
servers:
- domain: "{{ traefik_domain }}"
proxy_pass: "http://127.0.0.1:8000"
- domain: "{{ jellyfin_domain }}"
proxy_pass: "http://127.0.0.1:8000"
# docker
docker_users:
- vagrant
# traefik
traefik_version: latest
traefik_dashboard: true
traefik_domain: "traefik.{{ base_domain }}"
traefik_auth: admin:$apr1$T1l.BCFz$Jyg8msXYEAUi3LLH39I9d1 # admin:admin
#traefik_acme_email: realemail@example.com # Let's Encrypt settings
#traefik_production: true
traefik_http_only: true # if behind reverse-proxy
# jellyfin
jellyfin_domain: "jellyfin.{{ base_domain }}"
jellyfin_version: latest

11
dev/mediaserver.yml Normal file
View File

@ -0,0 +1,11 @@
- name: Install Media Server
hosts: all
become: true
vars_files:
- host_vars/mediaserver.yml
roles:
- base
- proxy
- docker
- traefik
- jellyfin

9
mediaserver.yml Normal file
View File

@ -0,0 +1,9 @@
- name: Install Media Server
hosts: mediaservers
become: true
roles:
- base
- proxy
- docker
- traefik
- jellyfin

20
roles/.gitignore vendored
View File

@ -1,20 +0,0 @@
/*
!.gitignore
!requirements.yml
!base*/
!bitwarden*/
!docker*/
!gitea*/
!jenkins*/
!libvirt*/
!mariadb*/
!minecraft*/
!nextcloud*/
!nginx*/
!postgresql*/
!prometheus*/
!proxy*/
!rsnapshot*/
!traefik*/
!unifi*/
!wordpress*/

View File

@ -1,18 +1,24 @@
- name: Reboot host - name: Reboot host
reboot: ansible.builtin.reboot:
msg: "Reboot initiated by Ansible" msg: "Reboot initiated by Ansible"
connect_timeout: 5 connect_timeout: 5
listen: reboot_host listen: reboot_host
when: allow_reboot when: allow_reboot
- name: Restart WireGuard - name: Restart WireGuard
service: ansible.builtin.service:
name: wg-quick@wg0 name: wg-quick@wg0
state: restarted state: restarted
listen: restart_wireguard listen: restart_wireguard
- name: Restart Fail2ban - name: Restart Fail2ban
service: ansible.builtin.service:
name: fail2ban name: fail2ban
state: restarted state: restarted
listen: restart_fail2ban listen: restart_fail2ban
- name: Restart ddclient
ansible.builtin.service:
name: ddclient
state: restarted
listen: restart_ddclient

View File

@ -1,11 +1,11 @@
- name: 'Install Ansible dependency: python3-apt' - name: 'Install Ansible dependency: python3-apt'
shell: 'apt-get update && apt-get install python3-apt -y' ansible.builtin.shell: 'apt-get update && apt-get install python3-apt -y'
args: args:
creates: /usr/lib/python3/dist-packages/apt creates: /usr/lib/python3/dist-packages/apt
warn: false warn: false
- name: Install additional Ansible dependencies - name: Install additional Ansible dependencies
apt: ansible.builtin.apt:
name: "{{ item }}" name: "{{ item }}"
state: present state: present
force_apt_get: true force_apt_get: true
@ -17,7 +17,7 @@
- python3-psycopg2 - python3-psycopg2
- name: Create Ansible's temporary remote directory - name: Create Ansible's temporary remote directory
file: ansible.builtin.file:
path: "~/.ansible/tmp" path: "~/.ansible/tmp"
state: directory state: directory
mode: 0700 mode: 0700

View File

@ -1,22 +1,17 @@
- name: Install ddclient - name: Install ddclient
apt: ansible.builtin.apt:
name: ddclient name: ddclient
state: present state: present
- name: Install ddclient settings - name: Install ddclient settings
template: ansible.builtin.template:
src: ddclient.conf.j2 src: ddclient.conf.j2
dest: /etc/ddclient.conf dest: /etc/ddclient.conf
mode: 0600
register: ddclient_settings register: ddclient_settings
- name: Start ddclient and enable on boot - name: Start ddclient and enable on boot
service: ansible.builtin.service:
name: ddclient name: ddclient
state: started state: started
enabled: true enabled: true
- name: Restart ddclient
service:
name: ddclient
state: restarted
when: ddclient_settings.changed

View File

@ -0,0 +1,5 @@
jellyfin_name: jellyfin
jellyfin_volume: "{{ jellyfin_name }}"
jellyfin_router: "{{ jellyfin_name }}"
jellyfin_rooturl: "https://{{ jellyfin_domain }}"
jellyfin_root: "{{ docker_compose_root }}/{{ jellyfin_name }}"

View File

@ -0,0 +1,5 @@
- name: Restart Jellyfin
service:
name: "{{ docker_compose_service }}@{{ jellyfin_name }}"
state: restarted
listen: restart_jellyfin

View File

@ -0,0 +1,37 @@
- name: Create Jellyfin directory
ansible.builtin.file:
path: "{{ jellyfin_root }}"
state: directory
- name: Create jellyfin user
user:
name: jellyfin
state: present
- name: jellyfin user uid
getent:
database: passwd
key: jellyfin
- name: jellyfin user gid
getent:
database: group
key: jellyfin
- name: Install Jellyfin's docker-compose file
template:
src: docker-compose.yml.j2
dest: "{{ jellyfin_root }}/docker-compose.yml"
notify: restart_jellyfin
- name: Install Jellyfin's docker-compose variables
template:
src: compose-env.j2
dest: "{{ jellyfin_root }}/.env"
notify: restart_jellyfin
- name: Start and enable Jellyfin service
service:
name: "{{ docker_compose_service }}@{{ jellyfin_name }}"
state: started
enabled: true

View File

@ -0,0 +1,5 @@
# {{ ansible_managed }}
jellyfin_version={{ jellyfin_version }}
jellyfin_name={{ jellyfin_name }}
jellyfin_domain={{ jellyfin_domain }}
jellyfin_rooturl={{ jellyfin_rooturl }}

View File

@ -0,0 +1,29 @@
version: '3.7'
volumes:
{{ jellyfin_volume }}:
networks:
traefik:
external: true
services:
jellyfin:
image: "jellyfin/jellyfin:${jellyfin_version}"
container_name: "${jellyfin_name}"
networks:
- traefik
labels:
- "traefik.http.routers.{{ jellyfin_router }}.rule=Host(`{{ jellyfin_domain }}`)"
{% if traefik_http_only %}
- "traefik.http.routers.{{ jellyfin_router }}.entrypoints=web"
{% else %}
- "traefik.http.routers.{{ jellyfin_router }}.entrypoints=websecure"
{% endif %}
- "traefik.http.services.{{ jellyfin_router }}.loadbalancer.server.port=8096"
- "traefik.docker.network=traefik"
- "traefik.enable=true"
volumes:
- ./config:/config
- ./cache:/cache
- {{ jellyfin_volume }}:/media

View File

@ -3,8 +3,8 @@ traefik_name: traefik
traefik_standalone: true traefik_standalone: true
traefik_http_only: false traefik_http_only: false
traefik_debug: false traefik_debug: false
traefik_web_entry: "80:80" traefik_web_entry: "127.0.0.1:8000"
traefik_websecure_entry: "443:443" traefik_websecure_entry: "127.0.0.1:8443"
traefik_localonly: "10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 127.0.0.0/8" traefik_localonly: "10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 127.0.0.0/8"
# HTTPS settings # HTTPS settings

View File

@ -9,9 +9,9 @@ services:
image: "traefik:${traefik_version}" image: "traefik:${traefik_version}"
container_name: "${traefik_name}" container_name: "${traefik_name}"
ports: ports:
- "${traefik_web_entry:-80:80}" - "${traefik_web_entry}:80"
{% if traefik_standalone and not traefik_http_only %} {% if traefik_standalone and not traefik_http_only %}
- "${traefik_websecure_entry:-443:443}" - "${traefik_websecure_entry}:443"
{% endif %} {% endif %}
networks: networks:
- traefik - traefik
@ -19,7 +19,7 @@ services:
- "traefik.http.routers.traefik.rule=Host(`{{ traefik_domain }}`)" - "traefik.http.routers.traefik.rule=Host(`{{ traefik_domain }}`)"
- "traefik.http.routers.traefik.service=api@internal" - "traefik.http.routers.traefik.service=api@internal"
- "traefik.docker.network=traefik" - "traefik.docker.network=traefik"
- "traefik.enable=${traefik_dashboard:-false}" - "traefik.enable=${traefik_dashboard}"
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock
- "{{ traefik_root }}/config:/etc/traefik" - "{{ traefik_root }}/config:/etc/traefik"

View File

@ -14,6 +14,7 @@ HOST[8]="wordpress.${DOMAIN}"
HOST[9]="site1.wordpress.${DOMAIN}" HOST[9]="site1.wordpress.${DOMAIN}"
HOST[10]="site2.wordpress.${DOMAIN}" HOST[10]="site2.wordpress.${DOMAIN}"
HOST[11]="unifi.${DOMAIN}" HOST[11]="unifi.${DOMAIN}"
HOST[12]="jellyfin.${DOMAIN}"
# Get Vagrantbox guest IP # Get Vagrantbox guest IP
VAGRANT_OUTPUT=$(vagrant ssh -c "hostname -I | cut -d' ' -f2" 2>/dev/null) VAGRANT_OUTPUT=$(vagrant ssh -c "hostname -I | cut -d' ' -f2" 2>/dev/null)